WebKit Bugzilla
New
Browse
Log In
×
Sign in with GitHub
or
Remember my login
Create Account
·
Forgot Password
Forgotten password account recovery
RESOLVED INVALID
155773
CSP: Log deprecation warning for frame-src directive
https://bugs.webkit.org/show_bug.cgi?id=155773
Summary
CSP: Log deprecation warning for frame-src directive
Daniel Bates
Reported
2016-03-22 15:51:45 PDT
The frame-src directive has been deprecated since CSP 2.0, <
https://www.w3.org/TR/2015/CR-CSP2-20150721/#directive-frame-src
>. Its replacement is the child-src directive. We should consider showing a console warning message when a Content Security Policy has a frame-src directive.
Attachments
Add attachment
proposed patch, testcase, etc.
Daniel Bates
Comment 1
2016-03-22 15:52:45 PDT
Maybe we should log a message of the form: The frame-src directive is deprecated. Use the child-src directive instead.
Brent Fulgham
Comment 2
2022-03-25 12:50:25 PDT
Ironically, the frame-src directive is no longer deprecated, and child-src is!
Note
You need to
log in
before you can comment on or make changes to this bug.
Top of Page
Format For Printing
XML
Clone This Bug